Avatar²

What Avatar² is

Avatar² is a free Python framework for dynamic analysis of embedded-device firmware. It coordinates targets, memory layouts, and execution plans so firmware execution can be split across targets. Those targets communicate through protocols with emulators, analysis frameworks, or physical devices. Documented targets include GDB, OpenOCD, J-Link, QEMU, and PANDA. OpenOCDTarget connects to physical hardware over JTAG, while JLinkTarget supports SWD and JTAG. PANDA support includes recording and replaying execution and managing analysis plugins. A memory layout defines regions and how reads and writes are forwarded between targets. Installation is documented through pip, from source, or in Docker, with QEMU and PANDA as Docker defaults. The project lists Linux support and ARM Cortex-M3 and x86-64 architectures. Its README provides target build scripts for Ubuntu 20.04; other distributions are not officially supported, though they may work with changes. Avatar² uses an Apache-2.0 license and is maintained by EURECOM's Software and System Security Group. Support is available through a public mailing list and an invite-based Slack community.

Who it suits

Avatar² suits analysts working on dynamic analysis of embedded devices and firmware. It is relevant to users coordinating emulators, analysis frameworks, or physical targets.

Getting started

1. Install Avatar² with pip, from source, or in Docker.
2. For a Docker setup, use the QEMU and PANDA defaults.
3. Choose documented targets such as GDB, OpenOCD, J-Link, QEMU, or PANDA.
4. Define memory regions and forwarding rules in the memory layout.
5. Coordinate targets and execution through an execution plan.

Verdict

Avatar² provides a target orchestration framework for dividing firmware execution and forwarding memory operations. Check its Linux support and distribution guidance before planning an installation.